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Abstract — In this paper, we study remotely-controlled 
single-input controllable linear systems, subject to peri- 
odic Denial-of-Service (DoS) attacks. We propose a control 
strategy which can beat any partially identified jammer 
by properly placing the closed-loop poles. This is proven 
theoretically for systems of dimension 4 or less. Neverthe- 
less, simulations show the practicality of this strategy for 
systems up to order 5. 

I. Introduction 

Cyber -physical systems consist of physical networked 
systems which are controlled and monitored re- 
motely [8]. Novel advances in communications and 
sensing technologies have promoted the emergence of 
these systems, which bears numerous advantages rang- 
ing from ease of implementation to increased utility 
in infrastructure facilities [16]. However, the potential 
benefits of such systems may be overturned by several 
challenges that include a higher exposure to external 
attacks. This has motivated a renewed research effort 
in the area of system security [9], [1], which attempts to 
address system preservation issues. 

In particular, the security of cyber-physical systems 
can especially be threatened by communication-signal 
jammers that are exogenous to the system. Common 
attacks include Denial-of-Service (DoS) and Deceptive 
attacks. In brief, a Deceptive attacker aims to change 
parceled data, whereas a DoS one tries to corrupt the 
transmitted data [30], [23]. According to [7], the most 
likely type of attack is a DoS attack. These attacks 
can be further categorized into periodic or Pulse-Width 
Modulated (PWM) jammers motivated by ease of imple- 
mentation, detection avoidance, and energy constraints 
while; see the papers [18], [19], [10], [14]. Inspired 
by this facts, this work focuses on the compensation 
of PWM DoS jamming attacks whose periodicity has 
already been detected. 

The subject of security of cyber-physical systems is 
receiving wide attention in the controls community. In 
the context of multiagent systems, the works [26], [21], 
[22], aim to identify malicious agents who are part 
of the network in order to cancel their contribution. 
The main goal of [6] and [5] is to maintain group 
connectivity despite the presence of a malicious agent, 
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thus identification is off the ground. The paper [31] 
proposes a Receding Horizon Control methodology to 
deal with a class of deceptive Replay attackers inducing 
system delays in formation control missions. Our prob- 
lem setup is related to these studies in the sense that 
the jammer is assumed to be detected and we aim to 
develop a method to overcome its effect. 

In the framework of secure discrete LTI systems, [12] 
considers deceptive attacks where the observation 
channel is jammed. In [2], however, a DoS attack where 
the attacker corrupts the channel while obeying an 
Identically Independent Distributed (LTD) assumption 
is considered. Similar research is conducted in [25]. 

Game Theory is a natural framework to study system 
security; some representative references include [15], 
[28], and [24]. These papers model the security problem 
as a (dynamic) zero-sum, non-cooperative game in 
order to predict the behavior of the attacker. Inspired 
by a leader-follower game-theoretic formulation, the 
paper [32] employs reinforcement learning to beat a 
deceptive attacker that can be modeled as a linear 
map. In this framework, the closest reference to our 
research is [15], which studies how the optimal control 
of linear system remotely under a strategic, energy- 
constrained DoS jammer. A main restriction of [15] is 
the consideration of scalar dynamics, which makes the 
presented analysis more tractable. 

Motivated by the goal of maintaining "intelligent" 
and economic communications, here we address the 
problem of system resilience in the context of triggering 
control, i.e., control actions triggered only when it is 
necessary. This is inspired by recent work [27], [20], 
[29]. The distinctive feature in our study is the fact that 
communication is not always feasible. 

We consider partially identified DoS attacks imposed 
by PWM jammers, along with single-input LTI systems. 
The current work follows upon [13], where we pro- 
vide sufficient conditions on the jammer's parameters 
which, in conjunction with a given triggering law, 
can ensure system stability. Despite the fact that it 
covers a broad class of continuous LTI systems, the 
previous strategy cannot cope with every given DoS 
periodic jammer. The current manuscript solves this 
issue by introducing a parameter-dependent control 
strategy which can tackle any DoS periodic jammer. 
Thus it ensures asymptotic stability under this class of 
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attacks, i.e., it renders the the system safe and secure. 
The strategy is proven to work for a narrower class of 
continuous LTI systems of order 4, or less, and, based 
on simulations, we conjecture its validity for a large 
class of higher-order systems as well. 

The rest of the paper is organized as follows. Section [TT1 
includes the problem formulation and notations. In 
Section some preliminaries are provided, where we 
propose a control design law to be employed later. 
Then we go on to Section IIV1 where we discuss a 
novel attack-resilient triggering law consistent with the 
jammer signal. In Section |Vj. we analyze and prove 
the security of the system equipped with this control 
design and triggering law. In Section IVI1 we demon- 
strate the functionality of our theoretical results on 
two academic examples. At last, in Section I VIII we 
summarize the results and state the future work. 

II. Problem Formulation 

In this section, we state, both formally and informally, 
the main problem analyzed in the paper. 

We consider a remote operator-plant setup, where the 
operator uses a control channel to send wirelessly a 
control command to an unstable plant, see Figure [l] 
We assume that the plant has no specific intelligence 
and is only capable of updating the control based on 
the data it receives. We also assume that the operator 
knows the plant dynamics and is able to measure its 
states at particular time-instants 

More precisely, consider the following closed-loop dy- 
namics: 

x(t) = Ax(t) + Bu(t) , (la) 
u(f) = Kx(t k ) , Vt G [*fc,* fc +i[, (lb) 

where x £ K" is the state vector, u g K is the input, 
A, B and K are matrices of proper dimensions, and 
{tk} k> i is a triggering time sequence. Here, we also 

1 This information can be obtained by using either local "passive" 
sensors, e.g., camera network or positioning systems, e.g., GPS, 
where no communication or cheap and safe communication is re- 
quired. 



assume that: (i) the system (Tajl is open-loop unstable, 
and (ii) the pair (A, B) is controllable. 

We consider an energy-constrained, periodic jammer 
whose signal can be represented as follows: 




l)T<t< (n-l)T + T oS , 
1)T + T oe <t<nT, 



(2) 



where n € N is the period number, T e K>o, and T = 
[0,T] is the action-period of the jammer. Also, T ff £ 
R>0/ T ff < T, and %& = [0,T o ff] is the time-period 
where it is sleeping, so communication is possible. We 
further denote T on e R> , and T oa = [Ton, T] to be the 
time-period where the jammer is active, thus no data 
can be sent. Accordingly, it holds that T g + T on = T. 
We also note that the parameter T g need not be time- 
invariant which recalls Pulse-Width Modulated (PWM) 
jamming. Finally, we denote by T" s a uniform lower- 
bound for T ff, i.e., T^j < T g which we assume holds 
for all the periods and we have identified as well. 

In this paper, we assume that the type of jammer and 
the period of the jamming signal has been identified. 
Future work will be devoted to enlarge the triggering 
time sequence for identification purposes. 

Putting these pieces together, we study the following 
problem: 

{Problem formulation]: Consider any energy- 
constrained, periodic jammer described by (0 
with parameters T and T ff. Knowing T and 
TJg, a uniform lower bound on the jammer's 
sleeping periods, find a control strategy of the 
form dlbl l that is resilient to the action of this 
jammer. 



III. Preliminaries 

In this section, we recall some useful properties of the 
systems that we study. These will be employed in the 
subsequent analysis. 

Since (A, B) is a controllable pair, the system ((Tal l can 
be put into a controllable canonical form by a proper 
similarity transformation [4]. Based on this fact, we 
narrow our study down to the systems of this form: 
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Recalling the pole-placement assignment techniques, 
we obtain the folowing result: 



Proposition 3.1: Consider A e R >0 and system |3]|. By 
choosing: 



A\ i e {1, ...,n} , 



all the closed-loop system poles are placed at —A. 

Proof: By plugging the proposed gains, A'^ = 
[fci, . . . , k n ], in the dynamics 1(3), the state matrix of the 
closed-loop system becomes: 

A + BK\ = 
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Note that the characteristic polynomial of this matrix, 
thanks to its specific structure, is given by [4]: 



p(s) = s n +nXs n ~ 1 + --- + 



n 1 u n -w " 

n — 1 



A™ 



Observe that the latter polynomial is indeed p(s) = (s+ 
A)™. Recall also that the eigenvalues of the matrix A + 
BK\, i.e., the poles of the closed-loop system, are the 
roots of p(s). Thus, we conclude that with this choice 
of gains, all the closed-loop poles are placed at —A. ■ 

The multiplicities of the eigenvalue —A, described in 
the previous result, are further characterized next: 

Proposition 3.2: Consider the system 10 along with the 
gains given in Proposition 13.11 The eigenvalue —A of 
the matrix A + BK\ has algebraic multiplicity n and 
geometric multiplicity 1. 

Proof: Since the characteristic polynomial of A + 
BK\ is p(s) = (s + A)", the algebraic multiplicity of —A 
is equal to n. The geometric multiplicity of —A is equal 
to the number of linearly independent eigenvectors of 
A + BK\ associated to —A; in other words, the nullity 
of the matrix A + BK\ + XI. Further, it holds that [4]: 

nullity(,4 + BK\ + XI) =n- rank(A + BK\ + XI) . (4) 

By construction, rank(A + BK\ + XI) > n — 1, as it 
has n — 1 linearly independent columns. Also, since 
—A is an eigenvalue of A + BK\, then it holds that 
det(^ + BK X + XI) = 0, thus rank(A + BK\ + XI) < n, 
From here, rank(A + BK\ + XI) = n — 1. According 
to ©, we have that nullity(A + BK X + XI) = 1, hence 
the geometric multiplicity of —A is 1. ■ 

Remark 3.3: Note that the matrix A + BK\ has only 
one linearly independent eigenvector, therefore, it is 
not diagonalizable. This property holds for all values 

of A e M> - 

Furthermore, since the matrix A + BK\ + XI depends 
on A in a polynomial way, the components of this 



eigenvector v are rational functions of A. In fact, v can 
be found as the solution to the following equation: 

(A + BK\ + XI) v = . 

IV. Jordan Decomposition and Triggering 
Strategy 

Our control strategy will consist of choosing an ap- 
propriate K\ as in Proposition 13.11 and an associated 
triggering strategy {tk}k>i- In this section, we study the 
Jordan decomposition of the closed-loop system under 
K\, and how to choose the corresponding {t k }k>\. 

From Proposition [37TJ the eigenvalues of the matrix A + 
BK\ are at —A. Thus, the Jordan decomposition of this 
matrix can be expressed as: 



A + BK\ = T\J\Ty 



(5) 



where J\ = —XI + N and T\ is a matrix built upon the 
linearly independent and generalized eigenvectors. We 
would like to remark the following: 

• The matrix N has a unique structure for all values 
of A; this is because the geometric multiplicity of 
this eigenvalue remains unchanged. Moreover, by 
construction of Jordan decomposition, it does not 
depend on this parameter, 

• As discussed in the Remark 13.31 the only linearly 
independent eigenvector of A + BK\ depends in 
a rational way on A. Then, by construction of the 
generalized eigenvectors [11], they also rationally 
depend on A. Hence, the matrices T\ and T^ 1 , they 
also depend on A in a rational way. 

Before presenting our triggering strategy, we introduce 
a family of coordinate transformations used in this 
paper. They are based on the Jordan decomposition of 
previous paragraphs. Let us consider the system ©, 
with the control u(t) = K\x(tk). Then, the closed-loop 
dynamics is: 

x = (A + BK x )x + BK\e , 

where e(t) = x(t k ) — x(t). Recalling (|5), the latter dy- 
namics under the static transformations e(t) = T\e\(t), 
and x(t) = T\x\(t), yields: 

xx = Jxxx + T^BKxTxex . (6) 

The following result states our first attempt in devel- 
oping the triggering strategy. 

Proposition 4.1: Take A > ||A^|| + l/2 and Kx as in Propo- 
sition 13.11 Then V(xx) = x^xx is an ISS-Lyapunov 
function for the system I0 and the event-triggering 
condition: 



Mi)! 2 < 



cr(2A — 1 — 2||iV||) 

llTr^AYrAll 2 



(7) 



guarantees the asymptotic stability of the system, for 
ae (0,1). 



Proof: Let B x = T X ~ 1 BK X T X , computing the time- 
derivative of V(x\), and plugging from dynamics (0, 
we obtain: 

V = x{x x + xlx x =( J x x x + B x e x ) T x x + 
x x {J x x x + B x e x ) . 

After some simplification, we obtain: 

V = X\(J\ + J*)x\ + e\B\X X + x T x B x e x ■ 

The latter can be further bounded recalling the follow- 
ing inequality: 

e \B x x x + x{B x e x < xjx x + e{BlB x e x , 

which then yields: 

V <x T x (Jl + J x +I)x x + e T x B T x B x e x . (8) 

Now, from our discussion on Jordan decomposition, it 
holds that Jj + J x = -2X1 + N T + N. By plugging this 
back into ©, we obtain: 

V < xl(N T + N — (2A — l)I)x x + e T x BlB x e x . 

We further upper-bound the latter equation, noting that 

\\N T \\ = \\N\\: 



V <-(2X-l-2\\N\\)\x x \ 2 + \\B x \\ 2 \e x \' 



(9) 



Hence, for A > j|iV|| + 1/2, according to Equation 10, 
and that V{x x ) = \x x \ 2 yx x , we conclude that V{x x ) = 
x^x x is an ISS-Lyapunov function for the system (0. 
Moreover, let a £ (0, 1) and that the triggering time- 
sequence be given when the following condition is 
violated: 

2 a(2\-l-2\\N\\) 2 
H ^ 1**1 , 

it then holds that: 

\><-(l-a)(2A-l-2!|7V||)|x A | 2 . 

Hence, the event-triggering condition, described by (0, 
guarantees the asymptotic stability of the system. ■ 

Remark 4.2: Let tk and tk+i be two consecutive time- 
instants given by the triggering law (0. Then, for each 
A, the following holds: 

3t x > 0, such thati fc+ i - t k > r A ,Vfc £ N. 

This is based on Theorem III.l, presented in [27]. 
In other words, the time-sequence generated by the 
triggering law 10 does not accumulate. This is an 
important observation used in our analysis. 

For the parameter t x , we show the following property: 



Theorem 4.3: Consider the parameter t x introduced in 
Remark |4~2"1 Then, the following holds: 



lim t x = . 



(10) 



Proof: Recalling Remark 1421 we first note that for 
the parameter t x it holds that t x < tk+i — tk,Vk £ N. 
In particular, it holds that t x < t2 — fi- Let us, without 
loss of generality, set t\ = 0, and denote t x = ti. Then, 
it holds that < t x < t x . In this proof, we shall show 
lirriA^oo t x = 0, which implies that Hindoo t x = 0. By 
construction of the triggering law (0, the time-instant 
t x is when the following holds: 



|ex(*A)| 



x /a(2X-l-2\\N\\) 

||rr x Bjr A T A || 



\xx(t x )\. (11) 



In the latter inequality and according to 10, it holds 
that BK X = T x JaT^ 1 - A, that is: 

T- X BK X T X = J X - T- X AT X . 

Hence, according to this equation, i fTT) can be written 
as follows: 



|ca(*a)| = 
Let us denote: 



^a(2X-l-2\\N\\) 



T x l AT x 



x x {t x )\. 



^a{2X-l-2\\N\\) 



T^ATxl 



(12) 



We continue by presenting the following result: 
Claim 4.4: The following holds: 

lim F(X) = . 

A— >oo 

Proof of Claim ESI Recalling that J x = -XI 
Equation lfl2t can be written as: 



(13) 
- N, 



F(X) 



x /a(2X-l-2\\N\\) 



IK-AX 



T- L AT X ) 



(-N)\\ 



where by applying the triangular-inequality of the form 

\\\-\I-T^AT x \\-\\-N\\\ < \\(-\l-T^AT x )-(-N)\\, 
we obtain: 

< F(X) < 



x /a(2X-l-2\\N\\) 



XI 



T-'AT X \ 



N\ 



Computing the asymptotic limit of the latter inequality, 
noting that N is a constant matrix, and T x T\ = I, 
yields: 



< lim F(X) < lim 

A— J-OO A— ¥00 



'2oX 



\T-\-XI - A)T X 



On the other hand, for a matrix A £ R" xn it holds that 
p{A) < \\A\\, where p(A) is the spectral radius of A; for 
further insight, refer to [4]. Hence, the latter equation 
can be further bounded as in the following: 



< lim F(X) < lim v2<tA 

~ a^oo - a^oo p(T x (XI + A)T X ) 



(14) 



Furthermore, recalling that T x 1 (XI + A)T\ is the simi- 
larity transformation of the matrix XI + A, it holds that 

p(T^ 1 (A/ + A)T X ) = p(XI + A). Accordingly, we get: 



< lim F(X) < lim 

~ A^oo \^oo p(XI + A) 

Now, by means of the Gersgorin disc theorem, we 
obtain that: 



p(XI + A) e U" =1 L>(A 



3& 



This implies that p(XI + A) has a linear growth as A 
tends to infinity. Therefore, without loss of generality, 
we can write the equation (fT4b as follows: 



< lim F(X) < lim 

A— »-oo A— »oo A 



2aX 



(15) 



where c is some constant. Hence, based on JTBl , it is 
easy to check that dl3l l holds, which completes the proof 
of this claim. • 

Having proved liniA^oc = 0, we would like to 

show liniA-)-oo t x = 0, which then, by the squeeze 
theorem, yields lim^^ t a = 0. The next claim goes 
along this direction. 

Claim 4.5: The following holds: 

lim t\=0. (16) 

A— >oo 

Proof of Claim 14.51 Recalling the triggering law and by 
construction of t\, the following holds: 

\e x (t x )\ = F(X)x x (t x )\ . (17) 

On the other hand, recall that for t E [0,t x ]\ 

e x (t) = T^e(t) = T^(x(t) - x ) , 

that yields: 

ex(t) = xx(t) - T^xo . 
Applying the latter equation on §Y7\ gives: 

\xx(tx)-T x - 1 x \=F(X)\x x (t x )\. (18) 

In order to prove the result, we now consider two cases: 

Case (i): |x A (t A )| = 0. In this case, by (O, it holds that 
xq = 0. Also since the system is linear and the chosen 
control law of the form u = Kxq, the system does not 
evolve. In other words there is no need for triggering, 
tx = which renders t a = 0. 

Case (ii): |x A (t A )| ^ 0. In this case, dividing dTSb by 

|za(£a)|/ bestows: 



F(X) 



\xx(tx) - T x 1 x \ 
M*a)| 



Computing the absolute-value of the latter equation, 
and applying the triangular inequality, yields the fol- 
lowing result: 



\F(X)\=F{X) 



\xx(tx) 



T x - l x \ 



> 



\ x \(t\)\ 
M*a)| - {Tx'xo 



> 0. 



Now, according to the Claim 
theorem, we obtain: 



x\(t x )\ 

and by the squeeze 



lim 



1 - 



I^a^a)! 



= 



lim wt 

A->oo \x X {tx)\ 



1 



(19) 



Now we will show that lim^oo tx = exploiting 
a contradiction argument. Hence, let us assume that 
limA^co tx 0. Then, the negation of the mathematical 
definition of lim,\->.oo ^a = implies: 



3t* such thatVA > 0, 3X > A such thaU A > t* 



(20) 



In l|20"l> . let us take the sequence {Afe}fc S N/ where X k — > 
oo as k —> oo, and set A = A^. Then we have the 
counterpart sequence {i Afc }fceN/ for which we have that 
tx k > t*. Because of this, we have that: 

\x Xk (t Xk )\ < Mt*)\, 

which follows from V(t) < for t < tx k — by the choice 
of our triggering law — and that V(t) = \xx k (t)\ 2 . To 
obtain a deeper insight, we refer the reader to the proof 
of Theorem 15.11 Based on this observation, we derive 
the following inequality: 



lim 



\x\ k 



< lim 



l*A»(0)| 



(21) 



fc-*x> \x Xk (t*)\ fe-^oo \x Xk [t Xk )\ 

Since t* < t Xk , and by Equation f30|l , we obtain: 

\x Xk (t*)\ < |* Afc (0)|exp(-(l - <7)(2A fc - 1 - 2||JV||)*72) , 
which yields: 

\x\ k r 



\xx k (t*)\ 



> exp ((1 - a)(2X k - 1 - 2\\N\\)t* /2) . (22) 



As a E (0, 1), by properly letting X k > 1/2 
infinity, we obtain: 



|JV|| go to 



which induces: 



fe^oo \x Xk (t*)\ 



fe^oo \x Xk (tx k )\ 



OO . 



from (|2T1 l. From here we conclude that j2"2l is in 
contradiction with j!9) . Therefore, it must be that 

lim A _ yoo tx = 0. 

Henceforth, we observe that for both Case (i) and 
Case (ii), the Equation (l6l l holds, thus it completes the 
proof of this claim. • 



Finally, from the set of inequalities < t\ < t\, which 
holds for all A € R>0/ and by Claim l4~5l that shows that 
liniA^oo t\ = 0, we can conclude that lim.x->oc t\ = 0. ■ 

In this paper, we assume that the jammer is imposing a 
"worst-case jamming scenario" , i.e., T g = XjS. Now, hav- 
ing established the Proposition 14.11 and introduced the 
parameter t\ in Remark 14.21 we define the triggering 
strategy as follows. 

Definition 4.6: The triggering strategy used in this pa- 
per, despite presence of the jammer, is as follows: 

t* k ,„ G {lr x \lr x G [(n - 1)T, (n - 1)T + T«]} U 

{nT} . (23) 

We note that based on Theorem 14.31 and for a given 
T, we can find a A c so that the multiples of t\ lie 
in the desired interval, i.e., the set introduced in j23l 
is never empty. The triggering law introduced in our 
recent paper [13] has inspired this strategy. The main 
difference between both laws is the choice of triggering 
times. While here we adapt the triggering sequence 
via an appropriate choice of t\ that depends on the 
jammer, in [13] we study when the time-sequence 
generated by 10 is sufficient to beat a given jammer. 

In 1231 . k € N denotes the number of triggering times 

occurring in the n th jammer action-period, and I e N The rest of the proof goes over the following steps: 



Proof: We shall focus on the first jammer action- 
period, i.e., < t < T. For the sake of brevity, we drop 
n = 1 in the t* k n annotation. Without loss of generality, 
let t* k = kr\, for k G {1, . . . , m}, be the time-sequence 
generated by (|23l , where m is such that: 



t* m = mrx < T£ff < t* m+1 = (m + l)r A . 

We note that we can always assume this, since accord- 
ing to the Theorem 14.31 we can make t\ arbitrarily 
small by choosing A large enough. As t\ > 0, the latter 
equation yields: 

rpci 

m < _2l < m + i . 
Thus, [-^J = m, where |_-J is the floor operator, and 



T 



off 



(28) 



It is easy to see that for all a > 0, if [a\ > 1, then 



[a\ > a/2. Based on this observation, and as 



then it holds that |_ 

t* 



iottl > 
TX J — 



2t. 



-, which by 



gives 



> 1, 



T 



off 



T 



off 

2 



(29) 



stands for the multiples of t\ starting from I = 1 in the 
first period and adding up afterwards. 

V. Stability Analysis of the Triggering 
Strategy 

In this section, we shall present the main result of this 
paper to guarantee the stability of the class of systems 
considered under the given type of jamming attacks. 

The following bound is found in [17]: 

||exp(M)|| <expGu(M)), Mel" x ", (24) 
where the /i operator is defined as follows: 

' M + M T ~ 



/i(A/) = max < fx | fx G spec 



(25) 



In the proof of next result and in order to avoid the sign 
confusion, we shall use a variation of d25b . Denote: 



(27) 



/i M = |M(M)| + l. 
Then, the following holds: 

||exp(M)|| <exp(/uf). 

Theorem 5.1: Consider the system lO of order lesser 
than 5, where (A, B) is a controllable pair. Given a 
jammer signal (T^T), then 3X* > \\N\\ + 1/2, such 
that VA > A*, the system with control gain K\ as chosen 
in Proposition 13.11 and with triggering strategy l!23t , is 
asymptotically stable. 



1) We break the time-interval [0,T] into two sub in- 
tervals [0,t* n+1 ], and [t* m+ i,T\; namely, when the 
jammer is sleeping and active, respectively, 

2) Then, in order to find an estimate for |a:(i* ri+1 )|, 
and |x(T)|, we first transform the original system 
into new coordinates by the matrix T\; we perform 
some computations, and transform it back into its 
original coordinates, by T^ 1 — this is done for 
each subinterval [0,t* n+1 ], and [i* l+1 ,T]. This way, 
the analysis becomes more tractable, 

3) Finally, the theorem conclusion will follow by 
studying a coefficient C(A), appearing in |x(T)| < 
C*(A)|x(0)|. Due to lim^oo C(A) = 0, we will be 
able to guarantee {|x(nT)|} is decreasing and use 
a Lyapunov argument to prove stability. 

Let us consider the transformed system (O. We observe 
that for t <G [0,t*„ +1 ], and according to Remark l4~2l the 
event (0 introduced in Proposition 14.11 holds, and that 



( 26 ) also that V 



T 



\x\\ is an ISS-Lyapunov func- 



tion. Hence, resorting to the proof of this proposition, 
the following inequality holds: 

V(x x ) < - (1 - (t)(2A - 1 - 2||AT||)| a ; A | 2 = 

-(1- CT )(2A- l-2|LV||)n*A), V*G[0,C +1 ]- 

The latter equation, by the comparison principle, 
yields: 

V(x x ) < V(x x (0)) cxp (-(1 - a)(2X - 1 - 2||JVT||)t) . 



which then, by recalling V = x A x A = \x x \ 2 , yields: and using x = T x x x to transform it back into the 

\ Xx (t)\ < |x A (0)| exp (-(1 - <r)(2A - 1 - 2||JV||)t/2) . **** 

(30) x(t) =exp ((t - t; n+1 )A)x(t; n+1 )+ 

Now, we have to transform the latter equation into r* 

original coordinates. First, by using x{t) = T x x x (t): / t CX P ((* ™ s)A)BK x x(tl l ) ds . (35) 

Amin((r A ) (T x ))\x\ < \x x \ < \\T X || |x| . (31) W e upper-bound (|35) , using (27), which results in the 

The latter equation is obtained noting that (i) \x x \ 2 = following: 

x T {T x 1 ) T {T x x )x, and (ii) the matrix (T X 1 ) T {T x l ) is a | x ( t )| <|x(C+i)| exp ((t - C+iW)+ 

positive-definite symmetric matrix. 

According to (31), Equation (T301 implies: 

-TO+l 

i ^* m ^ II^T 1 !! CX P (-(! _ CT )( 2A ~ 1 ~ 211^11)^/2) i i We evaluate the latter equation at t = T, and then solve 

A m ; n ( (T^ 1 ) T (T x 1 ) ) the lnte § ml t0 ° btam: 



tUI^U' "TO+l 

|.t(C)||| j BA- a || / cxp((t- s ) MA )d S . 



(32) |x(T)| <|x(C+i)|exp((T-C +1 )^)+ 

which is computed for t = t*. II RR\ II 

j . , f . . WOP ^(exp((T-C +1 W)-l). 06) 

In addition, m an analogous way, this time considering I^a 

t 6 14.4+iL we can obtain the following result: Since T - TJ f = T«, and < t* m+1 , we have that: 

1 ll^ 1 |kxp(-(l-a)(2A-l-2||jV||)r A /2) ^ T - f m+1 < 1£ . 

y / A mi „((T A - 1 ) T (r A " 1 )) Thus, we can rewrite (36) as: 

l*(C)l> (33) |x(T)|<|x(C + i)|cx P (T > A ) + 

where we note that r A appears, as by our triggering \x(t* m )\ " BKx " (exp (T*fi A ) - 1) . (37) 

law, C+i - C = T A- MA 

Let us consider the transformed system ©, once more. A PP¥ng now Equation © on (37), we get: 

We consider the time-interval [t* m+11 T], then e x (t) = \x(T)\ < H\BK X \\ . ,^ cr . . 

x x (t* m ) - x x (t) and so an equivalent form of (6) can be \ x (t* )| ~~ ' ~ ^ 6Xp ' ° n ^ A ) ~ 



written as: 



MA 

exp(-(l-a)(2A-l-2j|iV||)r A /2) 

exp(i on MA) 



x x = T x l AT x x x + T^BK^x^J, Vt G [C+i,^ • l|T A - 1 ||- 1 v /A mi „((T A - 1 ) r (r A - 1 )) 

Solving this dynamics for the initial condition (38) 

xx(t* m+1 ), we obtain the following: NoW/ com bining (32) and (38), we obtain: 

**(*) = cx P ((t-c + i)r A r 1 AT A )x A (c +1 )+ ^ / exp (_( 1 _ (T)(2A _ 1 ^ 2 || j v|| )C/ 

jf ex P ((t- S )T A 1 AT A )T A 1 BX A r A x A (C)d S , M || T -i ||-iyA~^y^^ 

(34) /J^a" 



-(exp(T c > A )-l) + 

MA 



which holds for f G [t* m+11 T]. In order to further exp (-(1 - <r)(2A - 1 - 2||iV||)r A ) \ 

simplify the latter equation, we use the fact that for ~ 1 _j =^~ ex P UonMAj I • (39) 

a given matrix A G R" x ™, and invertible matrix T G H T a II "V Amin (( T A ) T ( t a )) 

W ixn , it holds: exp (T~ 1 AT) = T" 1 exp (A)T. To bt a in the main equation, we shall use (29) to further 

Hence, Equation (3} is simplified as follows: bound CS), which then results in: 

x x (t) =T x 1 exp((t-t; n+1 )A)T x x x (t* m+1 )+ |x(T)| f exp (-(1 - a)(2X - 1 - 2||iV||)^ o V4) ^ 



/ 



T x 1 e W ((t-s)A)BK x T x x x (t* m )ds, N V II^II^VW^TTPf^ 

a| L(cx P (T«^)-1)+ 



which then results in the following equation: V ^ 

T A x A (i) =exp((i-C +1 M)TAX A (C +1 )+ C x P (-(l-a)(2A-l-2||iv||)T A ) cx P (T >^ A 



/ exp ((i - s)A)BK x T x x x {t* m ) ds , 
Jt* , , 



i^-^i-yA^^^- 1 )^^- 1 )) 

C(A) . (40) 



We present now the following result on the coefficient 
C(A), introduced in the latter inequality. 

Claim 5.2: In d40b following holds: 



lim C(A) = . 



(41) 



Proof of Claim 15.21 In order to complete the proof, we 
shall break C(A)-expression as follows: 



where: 



d(A) 



C(A) = d(A)(C 2 (A) + C 3 (A)) 



exp(-(l-a)(2A-l-2||iV||)T V4) 



C 2 (A) = (^^(exp(T > A )-l) ) 

and 

C3(A) — -, exp (l on ^ A ) . 

||T A - 1 ||-yA min ((T A - 1 )^(T A - 1 )) 

Then, we shall show that lim,\->oo Ci(A)C 2 (A) = 0, and 
lim A ^ co C 1 (A)C 3 (A) = 0. 

According to l|5}, and recalling J\ = — XI + N, we get 
BK\ = -A + T^i-XI + N)T\, which then results 
in BK X = -A - XI + T^ 1 NT\. Therefore, from this 
matrix equality and applying the 2-norm operator on 
both sides, we get \\BK X \\ = \\ — (A + XI) + T^NTxW, 
applying triangular-inequality on the right-hand side, 
we get \\BK X \\ <\\-(A+ XI)\\ + WT^NT^W, which 
can be further upper-bounded as follows: 



\BK X \\ < \\A\\ 



iTx'WWNUTxl 



We shall employ this latter inequality, in order to obtain 
a new upper-bound for Ci(A)C2(A): 



<Ci(A)C 2 (A) < C*i(A)x 



(exp(T >^)-l) 



(42) 



Now, in order to show that lim^oo Ci(A)C2(A) = 0, we 
put together these two facts: (i) Ci(A) decays exponen- 
tially, as A oo, since A > ||JV||+l/2, and a G (0, 1), (ii) 
based on what we explained in Section US the matrices 
T x , and T^ 1 depend on A in a rational way, so the val- 
ues ||Ta||, and 1 1 1 1 1 depend on A in a semi-algebraic 
form [3], thus the dependency of the coefficient of C\ ( A) 
appearing in upper-bound of Ci(A)C2(A) in l l42l on A 
is of a semi-algebraic form, which is dominated by an 
exponential dependency. Therefore, we can conclude 
that the upper-bound of Ci(A)C 2 (A) in J42b , tends to 
zero as A — s- oo. Henceforth, as the lower-bound of 
Ci(A)C 2 (A) is zero, then we conclude that: 



lim C 1 (A)C 2 (A) =0. 



(43) 



In the following lines, we show that 
limA^oo Ci(A)C 3 (A) = 0. First, we note that < r A < T, 
and -(1 - cr)(2A - 1 - 2||AT||) < 0, therefore, we get the 
following bounds for C 2 (A): 

||T A - 1 ||cx P (-(l- < 7)(2A-l-2||iV!|)r/2) 



WtrrTCTr 1 )) 



exp(T c > A )< 



: exp (T™ha) 



C 3 (A) < -g= 

y AminCCT^ ) T (T A " )) 

Also, Ci(A) > 0,VA, hence we can multiply the latter 
inequality by Ci(A): 

||T- 1 || C x P (-(l- < 7)(2A-l-2||7V||)T/2) i 



A mi „((T- 1 )^(T- 1 )) exp (-TSjia) 



-Ci(A) < 



C l( A)C 3 (A)< f^llexp^) Ci(A) 
X^iiTxYiTx 1 )) 



(44) 



Then, we study the limit of upper- and lower-bounds 
of ll44l . Let us plug Ci(A)-expression in the lower- 
bound of (SUl, we obtain: 



LB 



CiC 3 



(A) = 



|T A - 1 || 2 exp(-(l- f T)(2A 



2||JV||)(T/2- 



^oV 4 )) 



^((Tx'ViT^)) 

In order to show that lim^oo LBc l( 7 3 (A) = 0, we recall 
three facts: (i) Since a G (0,1), A > ||iV|| + 1/2, then 
there is an exponentially decaying term in LBc 1 c 3 (^)- 
(ii) Recalling our discussion in Section HVl T^ 1 depends 
on A in a semi-algebraic way, which is dominated by ex- 
ponential decay, (iii) Once again, referring to Section llVl 
the matrix (T X ~ 1 ) T (T^ 1 ) depends on A in a rational way. 
Hence, its characteristic polynomial depends on this 
parameter in a rational way, moreover, we note that 
this polynomial is of degree 4 or less, by assumption, 
and due to Galois theory, the dependency of the roots 
of this polynomial — including A m i n ((T A ~ 1 ) T (T A -1 )) — on 
A is of semi-algebraic form, which is dominated by 
exponential decay. 

Having discussed the behavior at infinity of the lower- 
bound of I04jl, we study the behavior of its upper- 
bound at infinity. Let us plug the Ci(A) expression in 
the upper-bound of (|44] |. We then obtain: 

UB ClC3 (A)^ 

HT- 1 !! 2 exp (-(1 - «x)(2A - 1 - 2\\N\\)(T«/4)) 



A, 



i((T -l )T(r -l ))cxp( _ T e >A) 



Similar to LBc 1 c 3 (A), it is easy to conclude that 
liniA^oo UBdCa (A) = 0. In the previous paragraphs, we 
have shown that the limit behavior as A grows of the 
lower- and upper-bound of jilt is 0. Hence, we infer 
that: 



lim Ci(A)C 3 (A) = 0. 



(45) 



Finally, having shown that the Equations J43t , and J45t , 
hold, we have proven d4lT > - This completes the proof of 
this claim. • 

At this stage, we have proven that in \x(T)\ < |a;o|C(A), 
it holds that lim^oc C(A) = 0. The main consequence 
of this conclusion is that, based on the definition of 
limit, the following holds: 

given e > 0, 3 A* , such thatVA > A* |C(A)| < e , (46) 

so, in other words, we can arbitrarily tune the decay ing- 
rate of the states via A (and its effect on C(A)). It 
is, nonetheless, worth mentioning that in order to 
paraphrase the asymptotic stability, the parameter e 
has to be chosen such that e < 1, so that according 
to (O, C(A) < 1, and so V(T) < V(0), which ensures 
the asymptotic stability as demonstrated in Claim 4.3 
in [13]. ■ 

Remark 5.3: As stated in the statement of this theorem, 
this is valid for systems of order 4, or less. An open 
question is the investigation the classes of systems 
of higher order for which the result still holds. In 
particular, we have observed the validity of the result 
for a system of order 5, and have presented the results 
in the Section IVTl 

VI. Simulations 

Having established the theoretical results of previous 
sections, here we demonstrate the functionality of these 
results on some representative academic examples. 

A. Example 1: 3 x 3 system 

We consider the following system: 



Algorithm 1 C(A)-Seeking 



1 


-3 -2 

3 
3 



A 3 + 3,- 





' " 


x + 







1 



II , 



A 2 + 2,-3A-3 






1 











1 


—A 3 


-3A 2 


-3A 



The state matrix of the closed-loop system is of the 
following form: 



A + BK\ = 



where its only eigenvalue is —A, which has algebraic 
and geometric multiplicity of 3, and 1, respectively, 
referring to Proposition 13.21 The only linearly inde- 
pendent eigenvector is given by solving the equation 

(A + BK\ + XI)vi = for vi, where we obtain: 




Input: Matrices: A, B, and N, Sequence: {A fc }^ =1 , Parame- 
ters: a, T c f r f , and T. 

1: Given controllable pair (^4, B), compute the proper sim- 
ilarity transformation matrix, and find (A C ,B C ) — which 
are in controllable canonical form, 

2: for k = 1 to N' do 

3: Numerically solve the following ODE, with cj>(0) — 0: 

4> =\\A + BK Xk || + Q\A + BK\ k \\ + \\BK\ k \\)cj>+ 
\\BK Xk U\ 

4: Find r\ k , such that <t>{ T \ k ) = o, 

5: Compute C(Afc), as stated in equation {40}. 

6: end for 

Output: Sequences {C(\ k )}k=i and {rx k }k=i ■ 



In order to build the matrix T\ (and T x l ), we need to 
generate two other generalized eigenvectors, namely 
i>2, and U3. They are, respectively, the solutions to 
(A + BK\ + Ai> 2 = v lr and (A + BK X + XI)v 3 = v 2 
equations. After some algebraic manipulations, we get 
the following result: 



V2 



v 3 



_3_ 

A 





Hence, matrix T\ is obtained as: T\ = [vi,V2,vs]. 
Moreover, given the multiplicities of —A, the matrix N 
is as follows: 

"010 
1 


In order to perform the simulation, we have to "tune" 
some parameters related to the jammer and the trig- 
gering policy. We have chosen a = 0.1, jammer action- 
period T = lsec, T C ^ j = 0.9T, j = 0.1T, and 
2 = 0.5T, T£ f 2 = 0.5T. We note that the first 
jammer is more malicious than the second one. 

We use the procedure explained in Algorithm [IJ to run 
the simulation. The result is presented in Figure |3] In 
order to get a deeper insight into the ODE introduced 
in step|3]of this algorithm, refer to Corollary IV.l in [27]. 

Referring to Figure|2] we can list the following remarks: 

Remark 6.1: We acknowledge these facts: (i) the 90% 
active jammer is more malicious than the 50% active 
jammer, and (ii) to maintain the asymptotic stability, 
we should at least guarantee C(A) < 1. Hence, let us 
define: 



A 



min {A fe |VA> A fe ,C7(A) < 1} 

Kk<N' 



Then, we obtain Ag % = 1360, and A 50 % = 210. Ac- 
cordingly, we can induce that in order to guarantee the 
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A 

Fig. 2. Third-order system: comparing 90% and 50% active jammers 



0.08, 



Evolution of the parameter t\ 




10 



Fig. 3. Third-order system: evolution of t> 



asymptotic stability, larger poles (in the absolute sense) 
are required in the case of 90% active jammer; this can 
be interpreted as larger control effort. 

Remark 6.2: According to the intricacy of the C(A) 
equation; finding A analytically, for a given value of 
C(A) is not feasible. As an alternative way, one can 
use our proposed procedure, in order to numerically 
achieve this goal. So, e.g., having obtained the sequence 
{C(Afe)}^L 1 , for a given sequence {Afe}^ 1 , one can then 
obtain a polynomial or spline approximation for C(A). 

For this system, we have also conducted a study on 
the evolution of the parameter t\ . This time, we picked 
the sequence {Afe = O.Olfc}^", and for each A&, we run 
the procedure explained in Algorithm [1] The result is 
presented in Figure [3] 

The Figure [3] confirms our result in Theorem 14.31 on the 
evolution of t\. 



We consider the following system: 
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The state-matrix of the closed-loop system is of the 
following form: 
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1 








A + BK X = 
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-A 5 


-5A 4 


-10A 3 


-10A 2 


-5A 



B. Example 2: 5 x 5 system 



Our main result in this paper, Theorem 15.11 is stated 
for the systems of order 4, or less. Nevertheless, this 
is based on the general condition provided by Galois 
Theory, leaving open the question of whether it holds 
for subclasses of systems of higher order. We have 
conducted a simulation study on a 5 x 5 system in 
canonical form, and as it comes later, our result is yet 
valid. 



where its only eigenvalue is —A, which has algebraic 
and geometric multiplicity of 5, and 1, respectively - 
referring to Proposition 13.21 The only linearly inde- 
pendent eigenvector is given by solving the equation 

(A + BK\ + \I)i>i = for vi, where we obtain: 



( 1 N 

-A 

vx = A 2 
-A 3 

V ^ 4 J 



In an analogous way as in Subsection IVI-A1 we com- 
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Fig. 4. Fifth-order system: comparing 90% and 50% active jammers 



pute the generalized eigenvectors: 
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( i \ 
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2A 

-A 2 
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/ 35 \ 
A 15 * 
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-A 
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-1 





V o J 



V o J 

Hence, matrix T\ is obtained as: T\ — [v i, V2, V3, V4, V5]. 
Moreover, given the multiplicities of —A, the matrix N 
is as follows: 



N 



10 

10 

1 





We "time" the parameters related to the jammer and 
the triggering policy: a = 0.1, jammer action-period 
T = 1 sec, T^l j = 0.9T, j = 0.1T, and T « 2 = 0.5T, 
-^off 2 = 0-5r. We note that the first jammer is more 
malicious than the second one. Then, we perform the 
simulation running the procedure explained in Algo- 
rithm [lj the result is shown in Figure |4] 

Referring to Figure |4j we can list similar remarks, as in 
Subsection IVI-AI Furthermore, as promised before, in 
both cases, it holds that liiriA^oo C(A) = 0, which could 
not be theoretically backed up. 



VII. Conclusions and Future Work 

In this paper, we have considered single-input, of 
order 4 or less, continuous LTI systems, under peri- 
odic PWM DoS jamming attacks. We have proposed 
a resilient control design law, along with a triggering 
time-sequence to update the controller. In the main 
result, we demonstrated that this control design and 
triggering law is capable of counteracting the effect of 
any jammer. In other words, we show that the system 
is rendered asymptotically stable under our contri- 
butions. The functionality of the theoretical studies 
has been demonstrated in the simulation environment; 
where we have also shown that the result holds for 
a system of order 5, for which our theoretical result 
cannot be stretched. 

In this work, we have assumed that the jammer signal 
has been previously detected and identified. We are 
currently studying how to exploit signal processing 
techniques to partly identify the jammer, that is to 
identify the parameter T: the jammer's period . More- 
over, as the title stands for, in this paper we have 
focused on single-input linear systems. In future work, 
we will plan to study nonlinear and multi-input classes 
of systems. 
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